This policy covers maxgirls.com and the Maxgirls platform. The operator is the Maxgirls brand at maxgirls.com. All privacy correspondence goes to app@maxgirls.com, and registered contact details are provided on request to that address.

What we collect, and why

When you create an account

An email address, and optionally whether you are a model or a booker. We also record where on the site you signed up from and any campaign parameters in the link you arrived on, so we can tell which pages are useful. We store your IP address and browser user agent with the signup, which is what lets us detect automated abuse of the form.

When you verify your identity

A photograph of a government-issued identity document, a liveness capture, and the data read from the document, including your name and date of birth. This is the most sensitive data on the platform and it is treated accordingly: it is not displayed on your profile, it is not shared with bookers, and it is not included in any export a booker can produce. What a booker sees is a badge and the date of the check. The full disclosure table is on the verification page.

When you use the site

Standard server logs: request paths, timestamps, IP address, user agent and referrer. These are what make rate limiting and abuse detection possible. We do not run advertising trackers or sell any of it.

When you run the casting brief builder

The four options you select are sent to our server to produce the brief, and the text of the brief is produced by a third-party language model. Nothing you select identifies you, no account is required, and the selections are not stored against a person.

Cookies

We set a session cookie so the site works, a CSRF token cookie so forms cannot be submitted from other sites, and one cookie recording that you confirmed you are 18 or over so the age notice does not appear on every page. That is the complete list. There are no advertising cookies and no third-party analytics cookies.

Who else processes your data

We use service providers for hosting, for sending email, for identity verification and for the language model that writes the casting brief text. Each of them receives only what it needs to do its job: the mail provider receives an email address and the message, the verification provider receives the document and the capture, and the language model receives the four options you chose and nothing about you at all. We do not sell personal data, and we do not share it for anyone else's marketing.

How long it is kept

Signup records: until you ask us to delete them.
Verification records: for as long as the account is active and afterwards for the retention period set out in the record-keeping statement, because a verification that supports a completed booking is documentation both parties relied on.
Bookings, releases and licences: retained after account closure for the same reason, and remain exportable by both parties during that period.
Server logs: a short rolling window, then deleted.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, and object to processing. Write to app@maxgirls.com from the address on the account and we will respond within one month. If you are in the UK or the EU you also have the right to complain to your national data protection authority.

Deletion has one limit worth stating plainly: we cannot delete a verification record that a completed booking depends on until its retention period has run, because that record is the other party's evidence that the shoot was documented. Everything else goes.

Security

Identity documents and liveness captures are encrypted at rest and access to them is restricted to the verification process itself. They are not retrievable through the ordinary application. We do not claim to be unbreachable, because nobody credible does. If a breach affects you, we will tell you.

Children

The platform is for adults. Nobody under 18 may hold an account, appear in any material booked through the platform, or use the site. Verification exists to enforce that rather than to assert it.

Changes

If this policy changes materially we will say so on this page and date it. The date at the top is the date of the current version.

Privacy policy